Behavioral task
behavioral1
Sample
09ac57cb04da0eb0893039ae15ca3c8d_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
09ac57cb04da0eb0893039ae15ca3c8d_JaffaCakes118
-
Size
784KB
-
MD5
09ac57cb04da0eb0893039ae15ca3c8d
-
SHA1
5a816c4e06b89c00d11716d701f175460a90245f
-
SHA256
8f1956a7619046e3ddd8feaca3816a86d632fdf4d45aaeacb8b77ca8cd2e1dca
-
SHA512
063522ab50bb7618abaab46811afedceeeaa6508c7b82078e0b028430b2d5c940fb12e4b97c13aacc1d560cbf23f51675480ec60e71a353125fd09050cfa855d
-
SSDEEP
12288:BtkfoMMFFu0Xd78E6GbZHh06+WLYnl7ZWwA1yaJuHxA4T8znw/egNaC:3Zh79lB06+KYnl811ZYHxA4ywtNb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09ac57cb04da0eb0893039ae15ca3c8d_JaffaCakes118
Files
-
09ac57cb04da0eb0893039ae15ca3c8d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE